AD/Entra Engineer – Contractor

Airitos, LLC

Active Directory Migration Engineer leading on-premises AD to Entra ID migrations for a large fintech organization. Requires extensive experience and occasional travel to Nebraska for project milestones.

Posted 7/11/2026contractNew York • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in directory services engineering, particularly in executing Active Directory to Entra ID migrations, configuring identity security controls, and managing Microsoft Intune for device compliance. Proficient in authoring technical documentation and conducting training sessions for operational handoff.

Highest-signal resume keywords

Active Directory EngineeringEntra ID MigrationMicrosoft Intune ManagementIdentity Security ConfigurationTechnical Documentation Authoring

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active DirectoryEntra IDMFAConditional AccessLDAPAzureAuthentication MethodsDevice ComplianceIdentity SynchronizationTechnical Documentation

Soft Skills

Knowledge TransferCollaboration

Tools & Technologies

Microsoft 365Entra ConnectADFSIntuneHybrid Join

Industry Keywords

Cloud-First ModelSecurity VulnerabilitiesAccess Control ModelsTier-0 Security BoundariesModern Authentication

Tech Stack

Tools & technologies

AzureCloud

About the role

Key responsibilities & impact

Execute discovery and assessment of the on-premises Active Directory environment and Microsoft 365 tenant, and document findings and dependencies
Contribute to migration design and tool selection alongside the architect
Perform Entra ID configuration, identity synchronization, and authentication setup
Run test migrations, then migrate and validate users, groups, and service accounts
Configure identity security controls including MFA, Conditional Access, and self-service password reset
Support endpoint and device management integration through Microsoft Intune
Produce as-built documentation and deliver administrator training and operational handoff

Requirements

What you’ll need

5+ years of hands-on directory services engineering, including extensive experience supporting and troubleshooting on-premises Active Directory (authentication, DFS, GPO, LDAP)
Demonstrated experience executing AD to Entra ID migrations in complex enterprise environments
Strong working knowledge of Entra Connect and authentication methods (Password Hash Sync, Pass-through Authentication, ADFS)
Hands-on experience with Microsoft Intune, including device compliance and Entra ID Join and Hybrid Join
Experience with Conditional Access, MFA, and identity protection in a cloud-first model
Solid grasp of AD security, common vulnerabilities and safeguards, and Tier-0 security boundaries
Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
Working familiarity with Azure environments
Ability to author technical documentation and conduct knowledge transfer sessions
Must be based in the United States and authorized to work without sponsorship
Must be available for occasional on-site travel (expenses covered by the client)
Must be able to pass a background check

Benefits

Comp & perks

All travel expenses are covered by the client